Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DAE1AC2CD6E11EF963A3E73762E951A.roa
File: 3DAE1AC2CD6E11EF963A3E73762E951A.roa (raw, json)
Hash identifier: FgIQuCmEgTsqijtQzr3seEGpPzwD07P0+Ph9XQaSRNI=
Subject key identifier: FA:01:87:CC:25:F8:82:3A:D3:37:5C:B2:97:F7:F4:1A:A9:95:F3:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF75
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DAE1AC2CD6E11EF963A3E73762E951A.roa
Signing time: Wed 08 Jan 2025 03:11:24 +0000
ROA not before: Wed 08 Jan 2025 03:11:20 +0000
ROA not after: Mon 13 Dec 2027 03:11:20 +0000
asID: 17561
IP address blocks: 156.248.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65397 (0xff75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 03:11:20 2025 GMT
Not After : Dec 13 03:11:20 2027 GMT
Subject: CN=677decdc-afd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:f5:ee:6b:9a:6c:0c:62:ec:60:71:ed:e4:
a3:0e:cb:c5:9e:17:a8:24:e0:93:23:c6:47:c7:3a:
e2:5d:85:db:4d:31:cd:be:47:d3:c6:fa:f5:dc:87:
06:95:22:e5:be:b7:7c:3b:22:b5:31:23:87:a0:c8:
ff:7d:fd:b8:79:a7:75:77:b3:7c:f5:2b:fc:94:11:
25:da:b1:53:c4:11:c2:d8:4e:e8:e4:1b:a9:5b:59:
0b:41:76:2b:2b:de:7d:2f:50:fc:b4:c2:f9:38:1a:
93:4e:37:71:34:60:b7:f2:87:bd:3d:cd:fc:13:6c:
27:25:c5:c6:7a:ce:29:55:d7:ef:57:99:e6:e2:85:
d0:1e:dd:70:97:03:ee:b0:26:5e:c9:b2:eb:d4:d8:
b5:b1:ce:11:a9:e9:35:2a:e6:c1:2b:f7:1b:67:68:
d1:25:9b:29:84:1a:7b:53:c7:73:34:db:7e:6b:4c:
b8:f8:93:0e:1b:2a:7c:41:1d:c7:c4:cf:43:16:94:
26:7b:c0:63:c4:7c:f2:49:4d:93:e0:da:59:18:16:
1b:a3:cd:65:5c:a8:72:07:c4:5a:7e:08:b8:c3:7c:
a2:8d:80:bf:54:65:f8:57:cc:23:35:8e:23:76:0a:
a0:8e:f5:da:90:e6:95:fd:d6:2f:55:11:71:03:06:
ff:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:01:87:CC:25:F8:82:3A:D3:37:5C:B2:97:F7:F4:1A:A9:95:F3:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DAE1AC2CD6E11EF963A3E73762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.20.0/24
Signature Algorithm: sha256WithRSAEncryption
42:d0:97:5e:4a:8e:50:1d:2c:5d:c3:d2:08:ef:1b:5f:a5:d7:
ad:19:b2:a6:4f:18:18:f2:cc:f9:3f:10:ef:88:e8:2e:43:31:
61:22:92:d8:61:81:9f:66:96:79:ed:d9:80:ce:cf:4a:8e:d6:
86:be:fe:22:f5:f8:01:c1:49:ed:13:27:57:06:1e:55:d0:80:
e6:3c:01:2a:a0:c8:e0:ee:b2:ec:18:68:cb:2c:30:8e:5c:ec:
1e:29:33:da:01:3f:77:d3:0e:10:59:56:f0:9e:66:54:e4:e2:
8d:af:c0:0e:40:3e:a4:71:cb:b7:84:d7:b5:e5:c1:1e:2a:c0:
80:d7:3a:8c:d6:94:d3:7c:fc:65:ab:13:6f:02:31:9e:ec:37:
9d:66:17:8d:34:59:b3:7f:90:1b:54:93:3c:00:c2:8c:f0:57:
2f:e9:c4:0f:72:27:33:e2:82:11:f0:9f:62:42:2f:a6:63:27:
04:1b:87:07:81:b2:06:7e:63:c0:c1:c8:e2:2b:95:0d:15:b3:
74:d6:03:cd:8f:50:36:c6:69:3c:c9:b5:cf:7a:21:a2:05:98:
b1:1a:f7:3a:91:f3:b5:f2:00:1c:5b:c1:a1:22:c7:ea:fc:1b:
8c:96:99:d4:6a:1f:fe:5b:eb:3f:ee:53:0e:6d:be:3c:1e:e4:
c9:42:95:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:34 2025 by rpki-client